[Freeipa-users] Ldap search for enrolled boxes

[Sean Hogan]

Thanks Robert,

 Appreciated


Sean Hogan
Security Engineer









From:	Rob Crittenden <rcritten at redhat.com>
To:	Sean Hogan/Durham/IBM at IBMUS, freeipa-users at redhat.com
Date:	12/07/2015 03:30 PM
Subject:	Re: [Freeipa-users] Ldap search for enrolled boxes



Sean Hogan wrote:
> Hello,
>
> Does anyone have a ldapsearch syntax that will check the database for
> all enrolled hosts within IPA and ignore non-enrolled hosts? I am not
> familiar enough with the schema yet to know which containers contain
> what. I know there is a flag on the gui for enrolled or not so thinking
> its doable. Also.. any recommendations on a ldap query tool for use with
> IPA?

$ kinit admin
$ ldapsearch -Y GSSAPI -b cn=computers,cn=accounts,dc=example,dc=com
"krbprincipalkey=*" dn

Any ldap query tool should work with IPA.

rob



-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://listman.redhat.com/archives/freeipa-users/attachments/20151208/e57c7982/attachment.htm>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: 55590262.jpg
Type: image/jpeg
Size: 27085 bytes
Desc: not available
URL: <http://listman.redhat.com/archives/freeipa-users/attachments/20151208/e57c7982/attachment.jpg>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: 55613256.gif
Type: image/gif
Size: 1650 bytes
Desc: not available
URL: <http://listman.redhat.com/archives/freeipa-users/attachments/20151208/e57c7982/attachment.gif>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: graycol.gif
Type: image/gif
Size: 105 bytes
Desc: not available
URL: <http://listman.redhat.com/archives/freeipa-users/attachments/20151208/e57c7982/attachment-0001.gif>